Priority MEDIUM 63
libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansilove_xbin() that allows attackers to crash applications by supplying a crafted XBIN file.
ansilove
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
ansilove records in CISA KEVNo ansilove vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
Priority MEDIUM 63
Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilove_xbin() in src/loaders/xbin.c that lacks bounds checks for compressed run-length records.
TI-2006-00674 CVE-2006-0695 · GHSA-55r4-q39x-7gc7
Ansilove before 1.03 does not filter uploaded file extensions, which allows remote…
Priority LOW 38
Ansilove before 1.03 does not filter uploaded file extensions, which allows remote attackers to execute arbitrary code by uploading arbitrary files with dangerous extensions, then accessing them directly in the upload di…
TI-2018-13714 CVE-2018-19353 · GHSA-p96p-g4pw-m95p
The ansilove_ansi function in loaders/ansi.c in libansilove 1.0.0 allows remote attackers…
Priority LOW 31
The ansilove_ansi function in loaders/ansi.c in libansilove 1.0.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.
TI-2006-00673 CVE-2006-0694 · GHSA-m635-gfrg-4wpw
Unspecified vulnerability in the loaders (load_*.php) in Ansilove before 1.03 allows…
Priority LOW 26
Unspecified vulnerability in the loaders (load_*.php) in Ansilove before 1.03 allows remote attackers to read arbitrary files via unspecified vectors involving "converting files accessible by the webserver".